Netgear ProSAFE Network Management System Arbitrary File Upload (CVE-2021-27274)

An unrestricted file upload vulnerability exists in Netgear ProSAFE NMS300. The vulnerability is due to improper validation of the uploaded file in the MFileUploadController class...

Binary Vulnerability in NETGEAR R8000

The NETGEAR R8000 is a gigabit router. A binary vulnerability exists in NETGEAR R8000. An attacker can exploit the vulnerability to cause a stack overflow...

PT-2021-4644 · NetGear · Netgear R8900 +9

Name of the Vulnerable Software and Affected Versions: NETGEAR R6700AX versions affected versions not specified NETGEAR R7800 versions affected versions not specified NETGEAR R8900 versions affected versions not specified NETGEAR R9000 versions affected versions not specified NETGEAR RAX10 versio...

CVE-2021-33514

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTPUSERAGENT;' with an OS command in the User-Agent field. This affects GC108P before...

CVE-2021-33514

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTPUSERAGENT;' with an OS command in the User-Agent field. This affects GC108P before...

Command injection

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTPUSERAGENT;' with an OS command in the User-Agent field. This affects GC108P before...

CVE-2021-33514

Certain NETGEAR devices are affected by command injection by an unauthenticated attacker via the vulnerable /sqfs/lib/libsal.so.0.0 library used by a CGI application, as demonstrated by setup.cgi?token=';$HTTPUSERAGENT;' with an OS command in the User-Agent field. This affects GC108P before...

CVE-2021-33514

CVE-2021-33514 affects multiple NETGEAR devices (e.g., GC108P/GC108PP/GS108Tv3/GS110TPPv1/GS110TPv3/GS110TUPv1/GS710TUPv1/GS716TP/GS716TPP/GS724TPP/v1/v2/GS728TPPv2/GS752TPPv1/v2/MS510TXM/MS510TXUP) with a pre-authentication command injection in the CGI setup path. The root cause is improper hand...

Netgear NETGEAR 操作系统命令注入漏洞

Netgear NETGEAR is a router from the American company Netgear. A hardware device that connects two or more networks and acts as a gateway between networks. A security vulnerability exists in NETGEAR devices that stems from NETGEAR devices can be exploited by unauthenticated attackers to inject...

Information Disclosure Vulnerability in NETGEAR WNR3500

The NETGEAR WNR3500 is a wireless router. An information disclosure vulnerability exists in the NETGEAR WNR3500. An attacker can exploit the vulnerability to obtain sensitive information...

Weak Password Vulnerability in NETGEAR DGN1000

The NETGEAR DGN1000 is a wireless router. A weak password vulnerability exists in the NETGEAR DGN1000. An attacker can use the weak password to log into the backend and obtain sensitive information...

Information Disclosure Vulnerability in NETGEAR DGN2200M

The NETGEAR DGN2200M is a wireless router. An information disclosure vulnerability exists in the NETGEAR DGN2200M. An attacker can exploit this vulnerability to obtain sensitive information...

Information Disclosure Vulnerability in NETGEAR WPN824v2

The NETGEAR WPN824v2 router is a wireless router device. An information disclosure vulnerability exists in the NETGEAR WPN824v2. An attacker can exploit the vulnerability to obtain sensitive information...

Information Disclosure Vulnerability in NETGEAR WPN824

The NETGEAR WPN824 is a wireless broadband router. The NETGEAR WPN824 suffers from an information disclosure vulnerability. An attacker can exploit the vulnerability to obtain sensitive information...

NETGEAR DGN2200v3 has a weak password vulnerability

The NETGEAR DGN2200v3 is a wireless router. A weak password vulnerability exists in the NETGEAR DGN2200v3. An attacker can use the weak password to log into the backend and obtain sensitive information...

Information Disclosure Vulnerability in NETGEAR WGR614v7

The WGR614v7 is a wireless router device. The NETGEAR WGR614v7 suffers from an information disclosure vulnerability that can be exploited by an attacker to obtain sensitive information...

The vulnerability of the Netgear Switch Discovery Protocol (NSDP) implementation in the microprogrammable switching devices NETGEAR ProSAFE Plus JGS516PE and ProSAFE Plus GS116Ev2 allows a perpetrator to increase their privileges.

The vulnerability of the Netgear Switch Discovery Protocol NSDP implementation of the NETGEAR ProSAFE Plus JGS516PE and ProSAFE Plus GS116Ev2 microprogrammable switching devices is related to the use of a hashing algorithm that contains vulnerabilities. Exploiting this vulnerability could allow a...

Information Disclosure Vulnerability in NETGEAR WNDR3300

The NETGEAR WNDR3300 is a wireless router. An information disclosure vulnerability exists in the NETGEAR WNDR3300. An attacker can exploit the vulnerability to obtain sensitive information...

Weak Password Vulnerability in NETGEAR WNR2200

The NETGEAR WNR2200 is a wireless router device. A weak password vulnerability exists in the NETGEAR WNR2200. An attacker could exploit the vulnerability to obtain sensitive information...

Weak Password Vulnerability in NETGEAR WNDR3400v2 Routers

The NETGEAR WNDR3400v2 router is a wireless router device. A weak password vulnerability exists in the NETGEAR WNDR3400v2 router, which can be exploited by an attacker to compromise the device, obtain sensitive information and perform unauthorized operations...